Description
IBM WebSphere Application Server 5.0.2 and earlier, 5.1.1 and earlier, and 6.0.2 up to 6.0.2.7 records user credentials in plaintext in addNode.log, which allows attackers to gain privileges.
References
- PK16492 vendor-advisory
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012064
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24012009
- PK22416 vendor-advisory
- 910 third-party-advisory
- ADV-2006-1736 vdb-entry
- 20032 third-party-advisory
- 20060509 IBM Websphere Application Server Multiple Vulnerabilities mailing-list
- http://www-1.ibm.com/support/docview.wss?rs=180&uid=swg24011773
- 25372 vdb-entry